- cypherpunks - lists.cpunks.org

Fwd: [Cryptography] "Flip Feng Shui: Hammering a Needle in the Software Stack"
by Georgi Guninski 02 Sep '16

02 Sep '16

----- Forwarded message from Jerry Leichter <leichter(a)lrw.com> ----- Date: Thu, 1 Sep 2016 11:33:16 -0400 From: Jerry Leichter <leichter(a)lrw.com> To: Cryptography List <cryptography(a)metzdowd.com> Subject: [Cryptography] "Flip Feng Shui: Hammering a Needle in the Software Stack" X-Mailer: Apple Mail (2.3124) "We introduce Flip Feng Shui (FFS), a new exploitation vector which allows an attacker to induce bit flips over arbitrary physical memory in a fully controlled way. FFS relies on hardware bugs to induce bit flips over memory and on the ability to surgically control the physical memory layout to corrupt attacker-targeted data anywhere in the software stack.... Memory deduplication allows an attacker to reverse-map any physical page into a virtual page she owns as long as the page’s contents are known. Rowhammer, in turn, allows an attacker to flip bits in controlled (initially unknown) locations in the target page. We show FFS is extremely powerful: a malicious VM in a practical cloud setting can gain unauthorized access to a co-hosted victim VM running OpenSSH. Using FFS, we exemplify end-to-end attacks breaking OpenSSH public-key authentication, and forging GPG signatures from trusted keys, thereby compromising the Ubuntu/Debian update mechanism." https://www.usenix.org/system/files/conference/usenixsecurity16/sec16_paper… -- Jerry _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography ----- End forwarded message ----- Does Rowhammer work in clouds? According to the popular story it affected only laptops.

3 4

Fwd: <nettime> Feminist Principles of the Internet
by HateSpeech 02 Sep '16

02 Sep '16

> Cecilia Tanaka: > www.feministinternet.net Fuck your feminist (otherist) principals.

3 2

Exchange / Trading / Analysis Software [re: Zenbot3 BTC/ETH/LTC bot]
by Carlos Rodriguez 02 Sep '16

02 Sep '16

grarpamp: > What software is out there that implements an exchange itself? > Be it for currency pairs, stocks, or commodity trade floor. > Currency pairs being the primary example above. Centralized model: http://buttercoin.net/ (old, last commit 2 years ago) Decentralized: https://bitsquare.io/ (but it’s not very popular yet, not much trade volume) http://www.coinffeine.com/ (not much info on it) Personally I don’t see these programs ever netting enough trade volume to rival top private exchanges. Traders won’t show up if the liquidity isn’t there.

2 1

Re: [ultra private] [for your eyes only] capitalism, socialism, anarchism, etc
by Razer 02 Sep '16

02 Sep '16

On 08/30/2016 07:17 PM, juan wrote: > On Tue, 30 Aug 2016 19:00:33 -0700 > Razer <rayzer(a)riseup.net> wrote: > > >> >> Your civil society without oversight is absolute bullshit. > > > What do you mean by 'oversight'? Apart from yet again showing > that you don't know fuck about liberalism. > > > >> >> I'm proposing, as so many political writers in history have purported, >> thet first there has to be change in the people. > > What THE FUCK are you talking about. And who are the so many > 'political writers' you invoke. Go ahead, post the long > list. Roszak Marcuse RD Laing Paul Goodman For a start. Don't like 'em? No one cares. TSOL and fuck off. > > >> Desperation over >> economics caused by insecurity of a product like food doesn't lend to >> that security. I propose (GASP!) that you have to be the fucking >> change you want to see in society. What a fucking revolutionary >> concept > > > See rayzer you are nothing but a pathetic charlatan. Try again, > tell 'us' what kind of political system you subscribe to and > explain how it would 'work' Sorry. Really not interested in writing a treatise on how to live honorably. > > > > >> >>> >>> >>> >>> >

5 14

IndependentOnion / RotorBrowser / Rotor - Interview
by grarpamp 02 Sep '16

02 Sep '16

# IndependentOnion / RotorBrowser / Rotor - Interview # intro 00:06:29-00:07:51 # exclusive jmprcx from 00:12:37-00:31:27, 00:37:02-00:51:30 # ppi commentary from 00:51:30-01:02:01 https://www.spreaker.com/user/anonukire/t0pg3arliv3-rotor-torfork-new-tor-b… https://api.spreaker.com/download/episode/9283555/t0pg3arliv3_rotor_torfork… # unrelated segments 01:06:01-01:31:20, 01:34:18-01:57:00 https://rotorbrowser.com/ https://github.com/IndependentOnion https://lists.rotorbrowser.com/pipermail/rotor-general/ https://twitter.com/Jmprcx https://twitter.com/hashtag/rotor https://twitter.com/hashtag/rotorbrowser https://twitter.com/hashtag/independentonion https://ghostbin.com/paste/4am8w https://twitter.com/hashtag/torfork

2 1

distractions
by Zenaan Harkness 01 Sep '16

01 Sep '16

Whilst those with any passion for actual political anarchy (aka direct democracy) are drowned out with rather pathetic psyop attempts at steering the conversation, the space to inspire newcomers is white noise. "Oh My God! How could the CIA say such stoopid things?!" But folks need their emotional entertainment. The real questions and discussions we ought be having here - coordinating inspired groups, facilitating clarity on the fundamentals of political anarchism, these largely don't exist or are drowned out. Perhaps we don't have a current generation of "young and hungry world shakers" at the moment? Perhaps the young and hungry world shakers are too afraid to speak publicly about anything USA's "the man" will take exception to? The example set upon Jim Bell (how many years jail for simply highlighting a new concept in clear and non-inciting terms, namely Assassination Politics) presumably dampens certain .. conversations. "Prudence" becomes the collective self censorship. I'm still waiting for Rayzer to publicly backtrack on his defense of the DMV. I would never have thought that would even be contentious in a supposedly "anarchist" group, but hey...

6 12

Fwd: <nettime> Feminist Principles of the Internet
by HateSpeech 01 Sep '16

01 Sep '16

> Cecilia Tanaka: > www.feministinternet.net Fuck your feminist (otherist) principals.

1 0

Google App Store Takedown Process
by Wilfred L. Guerin 01 Sep '16

01 Sep '16

Google App Store Takedown Process? First, does anyone have an example of App store export restriction takedown process, especially for including encryption libraries? Second, where are any lists of all encryption and encoding functions, especially all the various NIST and russian submissions and older (1950s-1980s) techniques?

1 1

Typical thread on cpunks (Was: Wodka xor Viskii)
by ListBaby 01 Sep '16

01 Sep '16

> Georgi Guninski: > Typical thread on cpunks > .us >> cunt > .ru >> scumbag > end of convo >> double end convo^2 >>> love, love, love & kisses. 8 <- o|o > marxist >> cunt^2 > scumbag^3 >>> love & orgasms >> capitalist swine > shit >> shit^2 > end of convo^3 >> the convo ended > shit >> cunt^5 > quadratic cunt >> ellipsoid cunt > wodka!! >> viskii!! You forgot fucker, fucker.

1 0

Typical thread on cpunks (Was: Wodka xor Viskii)
by ListBaby 01 Sep '16

01 Sep '16

> Georgi Guninski: > Typical thread on cpunks > .us >> cunt > .ru >> scumbag > end of convo >> double end convo^2 >>> love, love, love & kisses. 8 <- o|o > marxist >> cunt^2 > scumbag^3 >>> love & orgasms >> capitalist swine > shit >> shit^2 > end of convo^3 >> the convo ended > shit >> cunt^5 > quadratic cunt >> ellipsoid cunt > wodka!! >> viskii!! You forgot fucker, fucker.

1 0